Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/C74D18CE0E7811EF85000B7BC4F9AE02.roa
File:                     C74D18CE0E7811EF85000B7BC4F9AE02.roa (raw, json)
Hash identifier:          wmyGASIiv7a5dM7aYg9Xyk4GHWpb9boUmvi5Wrvs/1U=
Subject key identifier:   E0:9A:FD:62:FA:BB:B7:2A:83:D2:F3:A2:5F:7E:97:17:6F:91:62:FE
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       05F2
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/C74D18CE0E7811EF85000B7BC4F9AE02.roa
Signing time:             Sun 03 Aug 2025 00:06:21 +0000
ROA not before:           Sun 03 Aug 2025 00:06:21 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     132713
IP address blocks:        220.101.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 23:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1522 (0x5f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Aug  3 00:06:21 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=688ea7fd-da32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:66:fe:3e:af:f3:23:cb:96:a6:24:ed:07:45:
                    1c:47:18:b0:89:8a:e6:aa:9a:59:bf:71:78:b3:69:
                    60:fc:03:c3:f8:5b:fe:d6:62:03:4d:37:cd:c3:03:
                    75:32:b3:3d:ba:f1:6d:d3:4d:49:d2:b1:14:74:17:
                    45:45:04:00:58:68:d1:62:8c:bb:53:e4:4a:dc:1e:
                    40:06:f0:3b:1b:33:10:82:46:01:86:c5:59:0f:b5:
                    7f:f7:70:60:79:60:ac:e6:60:2a:60:d6:20:c1:3f:
                    6e:e5:30:7f:10:91:c5:76:19:9c:5b:1f:4c:fc:90:
                    b2:fc:0c:9c:e3:7b:2d:ee:79:18:d3:8a:a4:26:98:
                    62:3c:0f:63:ab:c4:ce:f9:85:5d:9d:6f:29:54:bb:
                    b2:1a:dc:dd:81:ea:d8:f9:2c:c7:d0:60:08:95:52:
                    fd:ad:18:cf:ad:51:db:14:fe:cd:0c:46:c1:00:fd:
                    67:9c:db:f3:0c:5b:e9:f6:8d:2f:7c:c5:77:66:84:
                    e4:2d:19:43:32:0e:c3:1a:4a:08:78:65:3e:3c:7e:
                    a2:9d:b8:5c:66:96:34:69:15:42:46:e3:ce:b2:9f:
                    c5:37:61:5c:53:d7:f4:bc:1c:62:7b:b2:4a:89:63:
                    d8:9e:f5:e2:bb:3a:ef:33:55:0e:2b:73:98:d9:2e:
                    e0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9A:FD:62:FA:BB:B7:2A:83:D2:F3:A2:5F:7E:97:17:6F:91:62:FE
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/C74D18CE0E7811EF85000B7BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.101.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:1f:17:db:4e:03:17:b4:3d:40:75:78:89:3f:b2:ce:b4:db:
         60:c3:87:6e:fd:7a:20:63:e8:5c:dc:9c:c7:a0:5e:08:1c:74:
         88:6c:53:7d:7c:ce:c4:24:a3:ff:00:20:fe:14:65:68:f1:39:
         a7:a1:59:30:ba:6f:ab:c8:f0:1c:23:66:a6:b9:e8:98:1d:4c:
         68:90:83:2b:b0:5c:0e:a4:4e:fe:1e:dd:19:9d:cb:fa:b6:62:
         14:f0:30:5c:f7:ae:c0:cc:cc:b1:15:f2:fd:ff:cc:b4:3c:fa:
         d9:3a:32:50:db:6b:28:77:41:26:ca:1a:8b:77:01:4d:11:08:
         de:03:71:91:7c:f1:ce:0b:55:52:5e:43:0f:47:20:3f:60:43:
         79:68:46:7c:1f:8b:00:41:16:3a:2d:be:9e:ca:71:75:bf:59:
         38:13:ed:28:8f:45:cd:99:04:6d:28:c7:92:72:96:7c:20:57:
         96:0e:f9:00:31:8e:a2:cf:c3:19:fa:44:7b:a3:ea:75:e3:cc:
         82:72:f6:05:59:04:94:c6:27:6f:9d:a8:f5:fb:38:d6:54:72:
         1b:f9:22:ad:33:d6:64:f3:3f:d3:72:8d:46:63:4b:3b:56:c2:
         5e:67:72:95:ce:56:b0:91:ce:7e:2e:d3:b0:2d:8a:70:3f:e6:
         32:f3:11:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:25:53 2025 by rpki-client